Vulnerabilities > CVE-2006-0469 - HTML Injection vulnerability in Uebimiau 2.7.9

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
uebimiau
exploit available
NVD
Published: 2006-01-30
Updated: 2018-10-19

Summary

Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG tag.

Vulnerable Configurations

Part Description Count
Application
Uebimiau
1

Exploit-Db

descriptionuebimiau webmail 2.7.2 - Stored XSS. CVE-2006-0469. Webapps exploit for php platform
idEDB-ID:20675
last seen2016-02-02
modified2012-08-20
published2012-08-20
reporterShai rod
sourcehttps://www.exploit-db.com/download/20675/
titleuebimiau webmail 2.7.2 - Stored XSS

References